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Large-scale quantum-correlated networks could transform technologies ranging from communications and 
cryptography to computation, metrology, and simulation of novel materials. Critical to achieving such quantum 
enhancements is distributing high-quality entanglement between distant nodes. This is made possible in the 
unavoidable presence of decoherence by entanglement distillation. However, current versions of this protocol 
are prohibitively costly in terms of resources. We introduce a new scheme for continuous-variable entanglement 
distillation that requires only linear temporal and constant physical or spatial resources, both of which are 
exponential improvements over existing protocols. Our scheme uses a fixed module - an entanglement distillery - 
comprising only four quantum memories of at most 50% storage efficiency and allowing a feasible experimental 
implementation. Tangible quantum advantages are obtained by using non-ideal quantum memories outside their 
conventional role of storage. By creating, storing and processing information in the same physical space, the 
scheme establishes a potentially valuable technique for designing stable, scalable protocols across different 
quantum technologies. 



Using the same physical space for storing and pro- 
cessing information is an attractive paradigm for mate- 
rial and information science [ ]. It will make devices 
smaller, and increase robustness and speed by dispensing 
with the necessity of moving information around. Such 
a development is particularly promising for quantum in- 
formation science, where stored quantum states await- 
ing processing are extremely vulnerable to noise [ , ], 
and shuttling information-bearing quantum states around 
a quantum device presents formidable challenges. Al- 
though enormous progress is being made in manipulating 
quantum information in a variety of systems and scenar- 
ios [ - ], theoretical proposals are necessary that min- 
imize the demands on such manipulation. This is vi- 
tal if the resources and advantages offered by quantum 
physics, in applications ranging from communications 
to metrology [ , ], are to be harnessed. Preparing dis- 
tributed quantum states with high quality quantum en- 
tanglement lies at the heart of this endeavour. Unfortu- 
nately, noise and decoherence inevitably deteriorate the 
quality of entanglement in states that are shared between 
distant parties [ ]. The situation can be remedied by 
entanglement distillation, in which multiple copies of a 
less entangled state are transformed by local operations 
and classical communications (LOCC) into fewer copies 
of a more entangled state [ ]. 

We introduce the notion of a quantum entanglement 
distillery. For continuous variable (CV) entanglement, it 
provides improved use of fixed resources to achieve the 
same levels of improvement in entanglement as earlier 
schemes. In fact, our distillery has doubly-exponential 
temporal and exponential spatial advantage over existing 
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distillation schemes [12, 13]. It also surpasses crucial 
limitations of finite-dimensional entanglement pumping 
schemes [ , ]. In particular, failed local operations 
merely reduce the entanglement of the states involved as 
opposed to a finite-dimensional instance where failed at- 
tempts lead to completely unentangled states. Ours is a 
repeat-until-success scheme using a linear number of ini- 
tially poorly entangled states to obtain a final state with 
higher entanglement. The distillery is a fixed module, 
consisting of only four quantum memories where the fi- 
nal amount of entanglement is governed by the initial 
states and the number of iterations. Memoiies [ ] al- 
low us to store results from previous iterations while the 
subsequent ones succeed, providing an exponential ad- 
vantage in time. The additional exponential advantage in 
space and time is provided by our entanglement distilla- 
tion protocol which we describe later. 

The quantum memories not only store quantum infor- 
mation, but also process it concurrently in the same phys- 
ical space. They allow us to repeatedly perform proba- 
bilistic operations on the same copy of the quantum state, 
further saving time and enhancing resilience against de- 
coherence. This is vital as all local schemes for dis- 
tilling entanglement must be probabilistic, since entan- 
glement cannot, on average, increase under LOCC. Fur- 
thermore, distillation of C V entanglement is not possible 
if all states and operations involved are Gaussian [17- 

]. This can be circumvented by performing prob- 
abilistic non-Gaussian operations on initially Gaussian 
states [12, 13, 17-20]. A major advantage over finite- 
dimensional schemes is that failed local operations do 
not require starting the whole process anew. Finally, our 
scheme is also event-ready, in that the protocol's success 
is reported by fixed detector outcomes. 

There are two key features the quantum memories 
must possess to be suitable for our distillery. Firstly, their 
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FIG. 1. Mashing, (a) A linear-optics schematic of the iter- 
ative mashing protocol, in which an entangled resource state 
1^°), distributed between two parties Alice and Bob, is inter- 
fered with the shared entangled state ]i/)') on 50:50 beamsplit- 
ters. Detection of vacuum by Alice and Bob heralds the suc- 
cess of the protocol, which produces a more entangled state 
IV''^^). (b) Implementation of mashing using four quantum 
memories. The resource state is generated between memories 
A2 and B2, while the state |-i/)*) is shared between memories 
Ai and Bi. The grey panels show the control pulses required 
to drive the memory interactions: full retrieval (red) and 50:50 
beamsplitter (green). Mashing is achieved by retrieving the re- 
source state from A2, B2, and sending it through memories Ai, 
B\ while driving a 50:50 beamsplitter interaction, as described 
in the main text. Vacuum detections herald the successful pro- 
duction of li/"'^^) between A\ and Bi (not shown). 



time-bandwidth product, which determines the number 
of iterations that can be executed within its coherence 
lifetime, must be sufficiently large. Secondly, they need a 
transparent failure mode, i.e. they transmit any unstored 
excitation, allowing them to be used as a beamsplitter, 
and enabling in-situ generation of the initial two-mode 
squeezed state. Most importantly, however, at no point 
do we require a perfect memory. 

We begin by describing our protocol, consisting of 
two major steps we call malting and mashing. We first 
describe mashing, which provides iterative improvement 
of a weak entanglement resource, and then the design of 
our quantum entanglement distillery that implements our 
scheme. Then we describe malting, the generation of a 
weak entangled resource, and analyze its success proba- 
bility. Finally, we show how realistic memories allow us 
sufficiently many iterations to get very close to the limit- 
ing state. 
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FIG. 2. Malting using quantum memories. The grey pan- 
els show the pulses required to drive the memory interactions: 
squeezing (blue), 50:50 beamsplitter (green), weak beamsplit- 
ter (purple), (a) A squeezing interaction is driven in both mem- 
ories A and B, which each emit photons entangled with spin- 
wave excitations. The propagating photons from A are directed 
into B and vice versa, while a 50:50 beamsplitter interaction is 
driven, causing the photons and spin-wave excitations to inter- 
fere. Vacuum detections herald the generation of a two-mode 
squeezed state shared by A and B. (b) De-Gaussification is 
achieved by photon subtraction at A and B. Because the states 
are stored in the memories, a repeat-until-success strategy can 
be employed. Weak control pulses drive a series of beamsplitter 
interactions with small effective reflectivities. When a retrieved 
photon is detected at both A and B, the malting process is over 
and the non-Gaussian entangled resources state \ilP) has been 
successfully generated. 



MASHING 

The mashing step of entanglement distillation begins 
with a non-Gaussian resource state \'>\P). This state is 
produced in a process called malting, which we describe 
later Any pure, bipartite state is locally equivalent to a 
state in Schmidt form as 



|^°)=^a°|n)^Jn)B,, 



(1) 



where \'n) Ax (|"-)bi) denotes an n-photon Fock state in 
Alice's (Bob's) mode. This is the resource at the end of 
malting stage from which we will distill our final state 
using an iterative protocol. In the first step of the itera- 
tion, Alice and Bob combine two copies of the state |'(/'°) 
on two 50/50 beamsplitters. In the case that each party 
detects vacuum on one of the emerging modes from each 
beamsplitter, the resultant state in the other two modes is 
|-0^). Next, 1-0^) is interfered with a fresh copy of |V''^) to 
produce |0^) upon vacuum detection, and so on. At stage 
i of the protocol, we combine If/"*) with \ilP) mode-wise 
on the beamsplitters, and detect vacuum, as in Fig. 1 (a). 



to produce the state 

(2) 
where Uab represents a 50/50 beamsplitter across modes 
a and b. If we denote 

IV'^> = E<l">-4j")si, for i = 0,1, 2..., (3) 



we obtain, from Eq. (2), an iterative relation of the form 

a'+^^Ma\ (4) 

where Ai depends on \ip'^). The convergence of this map 
is proven in [21]. Its behavior when different outcomes 
are detected in the mashing step, and its performance un- 
der decoherence is also discussed in [ ]. A key innova- 
tion of our work is that we implement both mashing and 
malting steps in the same hardware. We call this hard- 
ware an entanglement distillery, and present a design for 
it which uses only four quantum memories. 

AN ENTANGLEMENT DISTILLERY 

Our distillery consists of four quantum memories to 
store entangled states during the protocol, and act as non- 
linear and linear elements for generating and processing 
them. In fact, four photodetectors are the only other ele- 
ments required to implement the distillery. 

A quantum memory typically involves three modes, 
the input, the control, and a localised storage mode. The 
writing operation uses the control pulse to write the input 
into the storage mode, and the reading operation uses the 
control pulse to do the reverse. The storage mode b is 
generally a matter degree of freedom, while the other two 
are optical. The simplest interaction for transferring a 
single excitation amongst three modes is of the form 



n -- a^b^c + abc^. 



(5) 



The beamsplitter required for the mashing step in 
Fig. 1 (b) can be readily achieved by setting the field a 
to be classical. Note that one of the modes involved is 
optical, while the other is material. This allows us to ex- 
ploit the best of both worlds: the optical modes for trans- 
ferring information across the distillery, and the material 
modes for processing it. 

Once copies of \ip'^) are malted between memories Ai 
and Bi , and between A2 and B2 , the matter modes in A2 
and B2 are converted entirely into optical modes using 
strong control pulses. On Alice's side, the photons re- 
trieved from A2 are directed into Ai, and interfered with 
the matter mode via a 50/50 beamsplitter interaction, as 
in Fig. 1 (b). Correspondingly on Bob's side, the photons 
retrieved from B2 are interfered with the matter mode in 
Bi. In the case that no photons are detected emerging 
from the ensembles, the state shared by Alice and Bob 
is projected into \ip^). The second iteration proceeds by 



malting another copy of |V'°) between A2 and B2, and 
interfering this with the matter modes in Ai and Bi as 
described above, which produces \ip'^) provided both Al- 
ice and Bob detect vacuum again. Subsequent iterations 
are performed in the same way, by malting successive 
copies of |i/;°) and mashing them into the state held in 
AiBi . We note that this stage of the protocol requires a 
beamsplitter interaction with T — — that is, 100% re- 
trieval efficiency from the memories A2, i?2- The Raman 
scheme studied later makes this technically feasible [2 1]. 
Setting the mode c in Eq. (5) to be classical leads to 
a two-mode squeezing Hamiltonian, once again between 
an optical and material mode. This forms the first step of 
the malting process. 



MALTING 

Malting is a two-step process, depicted in Figs. 2 (a) 
and (b). The first step is a two-mode squeezing inter- 
action in memories A and B, held by Alice and Bob, 
denoted by the blue pulse in Fig. 2 (a). These gen- 
erate a pair of two-mode squeezed states of the form 
1$) = \/l — A^ ^^ A"|n)|n), where A is the squeez- 
ing parameter, and the matter mode of each memory is 
now entangled with its corresponding optical mode. The 
emitted photons are then directed over the channel con- 
necting Alice and Bob, so that Alice receives Bob's pho- 
tons, and Bob receives Alice's, as in Fig. 2 (a). Each 
party now uses a control pulse (green pulse in Fig. 2 (a)) 
to drive the same 50/50 beamsplitter interaction as used 
in the mashing step, so that Alice's photons are inter- 
fered with Bob's matter modes and vice versa. Finally, 
a photon counting detector placed behind each memory 
measures the optical mode emerging from the beamsplit- 
ter interaction. In the case that no photons are detected, 
the joint state of the two memories is again a two-mode 
squeezed state, now between the matter modes of Alice's 
and Bob's memories [Fig. 2 (a)]. 



\<^ 



AB, 



= Vl-A2^A"|n)^|n)B. 



(6) 



In order to prepare a suitable non-Gaussian resource 
state |'0°)^ some non-Gaussian operation is now required. 
That is the aim of the second part of the malting process. 
We can perform any non-Gaussian operation on one or 
both of the modes of the two-mode squeezed state, and 
the memory provides a lot of versatility, but for the rest 
of this paper we will concentrate on photon subtraction, 
which has been studied in the context of entanglement 
distillation previously [12, 13, 22-__ ]. 

Typically, photons are subtracted from optical modes 
using low-reflectivity beamsplitters and photon counters. 
This is a probabilistic process. In the same way, phonons 
can be subtracted from the matter modes by sending in 
weak control pulses and detecting the emission of a pho- 
ton at the output (Fig. 2 (b)). The advantage of using 
the matter modes to process information now becomes 



apparent, as the subtraction process can be tried repeat- 
edly on the same copy of the initial state. By contrast, 
an optical implementation requires fresh preparation of 
the initial state if the subtraction fails. If after several 
weak control pulses (green pulses in Fig. 2 (b)), a pho- 
ton has been detected by both Alice and Bob, a suc- 
cessful subtraction on matter modes in both the mem- 
ories has been heralded and our non-Gaussian resource 
state \ip^) is now ready. This completes the malting pro- 
cess. An example pulse sequence, as applied by Alice 
and Bob, is depicted in Fig. 2 (b), where they require 
three and five attempts, respectively, to successfully im- 
plement subtraction. This is a fundamental advantage of 
a memory-based CV distillery, without any counterpart 
in free-space, finite-dimensional distillation schemes. 

Each failed detection, however, alters the state. Since 
the initial state in the memory is a two-mode squeezed 
state, the quantum state after / vacuum detections (over 
both arms) is still a two-mode squeezed state of the form 
of Eq. (6), but with a squeezing parameter of a; = XT^ , 
where T is the effective transmissivity of the beamsplit- 
ter interaction. It is related to the reflectivity R by 
R'^ + T'^ = I. The larger the value of T the better. Rather 
conveniently, T can be made arbitrarily close to 1 simply 
by reducing the energy of the subtracting control pulses. 
If we succeed in detecting photons at the photon coun- 
ters in Fig. 2 (b) after / trials, our resource state takes 
the (unnormalized) form 



A^ 



IV'°) = V(n+lV"|n)^Jn) 



Bi, 



(7) 



with /i — xT"^ = XT^^'^ . Equating this with the entan- 
glement of the initial two-mode squeezed state allows us 
to find the maximum number of tries /c within which we 
must succeed if we are to have a net gain in entangle- 
ment. If T = 1 — ?7, for small 77, 



/c 



log(A/i^) 



(8) 



where i? is the real root of the equation 7-^ + (l — 2A)r^ + 
(2 — X)r — A = [ ]. For typical parameters such as 
A = 0.2 and T = 0.99, /c = 60. This means we have 
60 attempts at subtracting excitations before there is no 
net advantage over the initial two-mode squeezed state 
in terms of entanglement. The dependence of f^ on A 
is weak, but a lower readout efficiency allows us more 
attempts at detecting photons. 

Probability of successful malting: The probability of 
success for the first step (Fig. 1 (b)), in which vacuum 
detections at each party herald the creation of \^ab), is 
1 — A^, assuming perfect detectors. The probability of 
success of a memory-based subtraction at trial / + 1 after 
/ vacuum detections is 



Pf = {1-T^fx^{l-X^ 



(1 + A^^) 
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FIG. 3. Entanglement, measured by the logarithmic negativ- 
ity [26], of states after various steps of the distillation proto- 
col. Black: Original two-mode squeezed state. Orange: Pho- 
ton subtracted state in Eq. (7). Solid lines: Our scheme. 
Dashed lines: Exponential scheme of [ ]. Blue: 1 iteration, 
Green: 2 iterations, Brown: 3 iterations, Red: limiting state. 
Inset: Zoomed into the range A = [0,0.2]. This illustrates the 
marginal difference in the yield of the two schemes, and the 
appeal of our exponentially improved scheme. 



and the probability of succeeding by trial / is P/ = 
^ j^g Pj . For the initial state | ^'^) , the results of the dis- 
tillation scheme are presented in Fig. (3). As can be 
seen, the performance of our scheme is almost indistin- 
guishable from that of the exponential protocol [ ] . Ad- 
ditionally, the state converges to the limiting state after a 
small number of iterations. 

In principle, our distillery could perform an arbitrary 
number of iterations, but in practice the number of itera- 
tions is limited by the finite storage lifetime imcm of the 
memories. The useful lifetime of a memory is captured 
by its time-bandwidth product B — ^mcm/''", which is 
the number of clock cycles, as defined by the duration 
T of the control pulses, that fit within the lifetime of the 
memory. If p^ is the probability of success of mashing 
two copies of the limiting state, the maximum number of 
iterations «,„ satisfies [21] 



{im + l)/c 



< B. 



(10) 



(9) 



For A = 0.15, T = 0.75, and B = 20000, i,n = 54. 
Fig. (4) shows the number of iterations allowed for a 
broad range of parameters. For the instances we are in- 
terested in, a small number of iterations — three, for 
example — suffices to get close to the limiting case as 
shown in Fig. (3). Note that a memory with a time- 
bandwidth product on the order of B ^ 10'^ was recently 
implemented [ ], while B > 10^ is feasible with mod- 
est technical modifications, such as improved magnetic 
shielding. We next describe a quantum memory which 
can be used to implement a Hamiltonian of the form Eq. 
(5). 
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FIG. 4. Number of iterations possible as a function of the time- 
bandwidth product B and the initial squeezing A, for various 
different values of T used for photon subtraction: T = 0.8 
(Green), T = 0.9 (Red) and T = 0.95 (Blue). Smaller the 
value of T, larger is the maximum number of possible itera- 
tions. This is in contrast to Eq. (8), where the number of at- 
tempts decreases monotonically with T. This leads to a trade- 
off where one must choose the value of T judiciously. 



RAMAN MEMORIES 

Off-resonant Raman interactions in atomic ensem- 
bles provide a method for controllably coupling photons 
to non-propagating matter modes of atomic coherences 
known as spin-wave excitations. The archetypal system 
consists of a vapour of three-level atoms with a A-type 
level configuration, in which a ground state is coupled 
to a long-lived storage state via an excited state. Two 
types of interactions can be implemented [ ], as shown 
in Fig. (5). The first is a two-mode squeezing interaction, 
in which the emission of a Stokes photon is accompa- 
nied by one of the atoms flipping from the ground to the 
storage state, producing a distributed excitation across 
the atomic ensemble, a spin wave. Stokes photons and 
spin-wave excitations are therefore produced in corre- 
lated pairs, and the interaction Hamiltonian has the form 
of a two-mode squeezer [ , ] 



n, 



Cga^&^+h.c, 



(11) 



where C| 



rd'^rt^ / Ag is the coupling strength, with 



d the resonant optical depth of the ensemble and 7 the 
homogeneous linewidth of the excited state. Here a and 
b are annihilation operators for the Stokes and spin wave 
modes respectively. 

The second kind of interaction has the form of a beam- 
splitter between optical and material modes. If there 
is a spin-wave excitation, it is converted into an anti- 
Stokes photon. On the other hand, an incident photon 
in the anti-Stokes mode will be absorbed and mapped 
into the spin wave mode. This allows for the storage and 
on-demand retrieval of optical pulses [ ]. More gener- 
ally, if photons and spin-wave excitations are simultane- 
ously present, they will interfere, precisely as two optical 



FIG. 5. (a) An off-resonant Raman memory, comprised of 
an ensemble of atoms with A-type energy levels, provides a 
Hamiltonian of the form Eq. (5). (b) A two-mode squeez- 
ing Hamiltonian as in Eq. (11) in which a strong, off-resonant 
pump pulse with Rabi frequency Q,, detuning As from reso- 
nance and duration r drives spontaneous Stokes scattering from 
the ground state, (c) Here, the pump pulse is replaced by an 
off-resonant control pulse, with detuning Abs, that couples the 
storage state to the excited state. This results in an interaction 
as in Eq. (12). Note that we have associated the same opera- 
tor a to both the anti-Stokes mode for the beamsplitter and the 
Stokes mode for the squeezer. In order to match the modes for 
the two types of interaction, we arrange the detunings such that 
Abs = As + 5, where 5 is the Stokes splitting between the 
ground and storage states. 



modes would at a beamsplitter; the energy in the control 
pulse determines the effective reflectivity of the beam- 
splitter interaction. The Hamiltonian for this interaction 
takes the form [ ] 



"Hbs = CBsai)^ + li-c. 



(12) 



where the coupling strength Cbs is the same as Cs, ex- 
cept that the detuning Ag is replaced with Abs- The 
beamsplitter ratio is T « -^/l — C^g. 



DISCUSSION 

The Herculean task of maintaining coherence in one 
part of a quantum device while another decoheres is 
the biggest roadblock to scalable quantum technologies. 
Quantum computation, communication, simulation, and 
metrology should all benefit immensely from the act of 
storing and processing quantum information is the same 
physical space. We have shown that protocols can be de- 
signed that cater to this requirement, and that systems 
exist to implement them. Quantum memories can be 
used not only to store, but process quantum information. 
They would also allow us to perform other local gaus- 
sian operations, such as squeezing {ii}, as well as non- 
gaussian operations. Our quantum distillery can produce 
high-quality entangled states between distant parties us- 
ing just four quantum memories with imperfect storage 



efficiencies. We also showed that convergence to the Hm- 
iting state can be achieved using reaHstic memories with 
limited storage times. 

We have presented a protocol for CV entanglement 
distillation that is exponentially more efficient in spa- 
tial and temporal resources compared with previous 
schemes. The most attractive feature of our protocol is 
the ability to continue after failed probabilistic events. 
This is partly due to the use of continuous variables, 
which are more amenable to economic use than finite- 
dimensional systems like qubits. Critically, however, it 
is the localised nature of the continuous modes that re- 
ally allows us to recycle the outcomes of failed attempts. 

Preparation of entangled states is the starting point of 
most quantum information protocols. Designing proto- 
cols which minimise the experimental resource require- 
ments will be a key step in taking quantum information 



science into the realm of practical realisation. Our work 
shows the potential for achieving this by making best cre- 
ative use of existing components such as quantum mem- 
ories. We hope that this will encourage a stronger focus 
on the development of resource-efficient quantum proto- 
cols. 
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I. APPENDIX 

A. Convergence of the mashing step of distillation 
protocol 

The mashing step, depicted in Fig. 1 (a), is written as 



Denoting 

IV'I =^<\n)AM)B,, for z = 0,1,2..., 

n 

the mashing step can be expressed as 

1 " 

n On Z_^ 



t=a 






(13) 



Each iteration, shown in Eq. (2) and Fig. 2 (a), maps the 
set of coefficients {ajij^^o ii^^o {a^+^j^g. Hence, all 
the properties of the distillation scheme are encapsulated 

in the map (see Eq. 4) Mjk ^ h \ h. ] "^i-fe^O ~ ^)' 



where Q{x) is the Heaviside step function. Expressed in 
matrix form 
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M 
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4o 



V 



(14) 



/ 



It is easy to see that the fixed points of this map is 
given by a° = {^"}^=o- Note that the iteration in Eq. 
(13) leads to a^ = (ao)^- whereby a^ — 1. Also, a} is 
fixed, say to A all the remaining terms in the sequence are 
fixed. This proves that the fixed point is unique as well. 

As we are ignoring normalization here, we can choose, 
ap = 1. Then the map has eigenvalues of the form 1/2*^, 
k = 0,1,2,-- , independent of the actual form of the 
a" . Let us denote the (right) eigenvectors of A^ by |toj) . 
Decomposing the initial state in terms of these eigenvec- 
tors as 



IV-") 



k 



Ck\mk) 



After i iterations, we get 



>ii^"> = E 



Ck 



\mk). 



(15) 



(16) 



Note that the right eigenvectors do not form an orthonor- 
mal basis but still span the space. Thus, 



lim ||X>°)-|mo)||=0. 



(17) 



This implies that the limiting state after an infinite num- 
ber of iterations is the eigenvector corresponding to the 
eigenvalue 1. 

Following Eq. (3), let us designate 



lim a^ = an 



(18) 



Now we note a couple of features of this linear distilla- 
tion scheme in general, after which we will specialize to 
specific input states. Our distillation protocol leaves the 
first two coefficients of the state unchanged, and only en- 
hances the entanglement by modulating the higher Fock 
layers of the initial state. Also, in this linear scheme, the 
limiting state is determined by not just the a^ term of the 
initial state, but by all the terms in the initial sequence. 
This is the primary reason that makes the analytic deriva- 
tion of the limiting state hard. 

We now consider the a non-gaussian state as a re- 
source, the candidate for our |i/''^). The one we consider 
is a two-mode squeezed state with a photon subtracted 
from each arm. Such a state a given by Eq. (7). For this 
particular input state, 

«! =/'(n2 + 3n + 4)/4, (23) 

al^ n'\n^ + 7n^ + 24n + 32)/32. (24) 

It can be seen that the for this input state, a„ = On/i", 
with < a„ < 1. We can then rewrite the recursion 
relation in terms of the a„ as 



1 " 

-T 

2" ^-^ 



(t + l)a„_t. 



Its is interesting to note that outcomes different from 
that discussed above also lead to states with enhanced 
entanglement. Indeed, one could consider a mashing step 
as detecting a^ and bi photons on Alice's and Bob's sides 
respectively leading to the iteration 



1^ 



i+l\ _ 



-AiB 



Mib^\{UA^A2(^UB^B2W)A^B^(^\1p°] 



A2B2 



The case we have considered in the simplest to analyze, 
where a^ = 6^ = for all i. More general cases, involv- 
ing a, = bi 7^ 0,Vi, as well as those involving different 
detection events in each iteration can also be analyzed, 
and adaptive schemes involving classical communication 
between the parties designed that lead to highly entan- 
gled distilled states. A more complete analysis of such 
distillation strategies is beyond the scope of this work, 
and will be presented elsewhere. 



We note that a^^^ = aQUQ, which implies 

OfQ = 1 = ao, for i = 0, 1, 2, • 



(19) 



From Eq. (13), a]^^ — ^(q^i + "^i)- Iterating this recur- 
sion leads to 



a. 



Also ai+^ 



= «; = ai, for i = 0,l,2, ••• . (20) 
l{al + 2(a?)2 + 02), which leads to 



2K)^ 



and so. 



1- 



a2 



22J+2 



22^ + 1 



K)^ + ^«^. 



(21) 



(22) 



B. Mashing in the presence of dephasing 

We discuss in brief the role of decoherence in our pro- 
tocol. We envisage a scenario, where the distilled state 
at the end iteration i has to wait in the memories while 
the source state \ip'^) is malted. The state \tl/) will suffer 
dephasing in that time, and thereby loose its purity. To 
proceed further, we need to express the mashing step for 
mixed states. Let 



P 



= Yl Pki-r,ui\kl){mn\. 



kl-mn 



Then the mashing step corresponds to 



i+i 



--{m\{UA,A2 ® Ub,b2) {pmb^ ® pm 



(25) 



(26) 
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FIG. 6. The logarithmic negativity as a function of the squeezing parameter for the iterations 1 to 3 from left to right. The thick, 
red, dashed lines denote the entanglement at the end of the iteration when there is not noise. The thick, blue, dashed lines denotes 
the entanglement of the initial two-mode squeezed state, and is identical for all 3 plots. The arrow pointing downwards indicates 
increasing values of v, from to 2, with red denoting v = 0, and going through the spectrum to violet denoting v — 2. 



This can be expressed as an iteration on individual ele- 
ments of the density matrix by 



B. S 



PPQ;B.S 



P+Q+R+S 



EEEE 

p=0 9=0 r=0 s=0 




^ ' ("17\ 

PP-p.,Q-q;B-r,S~sPpq;rs- \^ ' > 



We consider dephasing on the state p phenomenologi- 
cally as 



Ppq-.rs — Ppq;rs^ 



(28) 



V denotes the amount of dephasing suffered by a state, 
and in the limit of u — ?► oo, the resulting state is com- 
pletely diagonal, and consequently classical. In Fig. 6, 
we show the effect of depashing on 3 iterations of our 
protocol. The largest value of v that makes the process of 
distillation break even in the presence of noise is around 

V — 2. Note that in the limit of complete dephasing of 
one of the states in an iteration, the state after the itera- 
tion still has as much entanglement as p'^ . This is another 
advantage of the linear protocol, which is much more 
susceptible to decoherence due to the exponential num- 
ber of states involved. In a practical scenario, this would 
translate to requirements on the length of time one can 
wait between iterations, and other physical and material 
parameters. 



C. Maximum number of subtraction attempts 

The entanglement, as quantified by the logarithmic 
negativity [_ ], in the phonon-subtracted state in Eq. (7) 
is 



TV/ = log 



{l + pf 



(l-/i)(l+A*2) 



(29) 



where jj, = XT^^^ . The logarithmic negativity of two- 
mode squeezed state with squeezing parameter A is 



Af = log2 



1 + A 
1-A 



(30) 



Equating the two above equations allows for a solution 

10 f ^ fc as 



/c = 



log(ii^/A) 
logT 



-2: 



iog(A/it;) 
f] 



-2, 



where R is the real root of the equation 

r^ + (1 - 2Xy + (2 - A)r - A = 0. 



(31) 



(32) 



D. Probability of success of the malting step 

As is to be expected, Pf > Po,yf. Denoting the log- 
arithmic negativity after i iterations hy Mi, a more rea- 
sonable figure of merit is the averaged entanglement gain 
given by -PcA//„ /PqNq , and we have found this ratio to 
be larger than unity for a broad range of parameters, typ- 
ically for T > 0.7, independent of A. As noted earlier, 
a larger value of T allows for a larger value of /c. To 
get an idea of how a finite time-bandwidth product af- 
fects the number of iterations possible in our quantum 
distillery, we need to calculate the probability of success 
of an arbitrary iteration. 

We begin by denoting the probability of success of the 
i"^ iteration as pf. The combined probability of an entire 



sequence of i successful iterations is then Pc 11 7=1 P?' 
where the Pc is the probabihty of successfully prepar- 
ing \ijj°) within /c trials as described above. Note that 
we are accounting for the worst-case scenario, whereby 
the initial state needs f^ attempts to be realized. As al- 
ready mentioned, our memory-based subtraction scheme 
increases the probability of photon subtraction. Also, 
i + 1 copies of this state are required for i iterations of the 
protocol. Then the total number of memory operations is 

given by (i + l)/c/Pc rij^i Pj j which must be less than 
B. 



(*m + l)/c / {hn + l)/< 



PcK 



< 



-iPj 



Pc{pl 



< B. 



(33) 



where for the first inequality we have used pf > p^ , the 
probability of the step defined in Eq. (2) succeeding in 
the limit of an infinite number of iterations. Since the 
limiting state is, by definition, invariant under Eq. (2), 



1 

\mw 



2\3 



l + fi^ 



(34) 



Inequality (33) can be solved numerically. 



E. Efficient readout 

After malting a resource state Jt/i") between the en- 
sembles A2, B2, this must be mashed into the current 
entangled state \ip'^) by retrieving it and interfering it 
with 1^*) in the ensembles Ai, Bi. This therefore as- 
sumes that we are able to retrieve a state with 100% 
efficiency from the ensembles A2, B2, which is to say 
that we can implement a beamsplitter interaction with 
T — 0. Fortunately, the Raman interaction allows for 
near perfect retrieval using multi-pulse readout. That is, 
a train of several control pulses is directed into the en- 
sembles. Each pulse may only achieve partial readout, 
but the combined effect of all the pulses enables, asymp- 
totically, the complete extraction of the stored excitation. 
The retrieved state is now distributed over several tempo- 
ral modes, but it remains coherent. Interfering this state 
with |'0*) now requires a single T = 1/2 interaction in 
Ai, Bi. Since the incident field is delocalized over sev- 
eral time bins, the appropriate control field to couple it 
to the stored spin wave should have the form of a pulse 
train [ ], but this is precisely what was used to drive the 
retrieval from A2, i?2- Therefore the same train of con- 
trol pulses can be re-used to mediate the interference. In 
fact, since only T = 1/2 is required for interference, per- 
fect modematching is not needed, and some attenuation 
of the control intensity can also be accommodated. This 
establishes the technical feasibility of each stage of our 
distillation protocol. Perfect storage is never required, 
and where near-perfect retrieval is desirable, it can be 
implemented easily with a train of several pulses — the 
ability to interfere the resulting temporally delocalized 
state is also retained with this scheme. 



